$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft File: fxYazxZAB-j32MdxFaWjnQQ2SPg.mft (raw, json) Hash identifier: sWl4LeAEC4RDFu1wEX9f/LXkar3L9TWx4WysW3dOceE= Subject key identifier: 70:11:47:5A:FD:9A:65:68:C2:F4:1C:46:9B:BB:C7:0D:37:8C:FB:63 Authority key identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 Certificate issuer: /CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Certificate serial: 3481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft Manifest number: 9A20 Signing time: Fri 30 May 2025 15:22:24 +0000 Manifest this update: Fri 30 May 2025 15:22:23 +0000 Manifest next update: Fri 06 Jun 2025 15:22:23 +0000 Files and hashes: 1: fxYazxZAB-j32MdxFaWjnQQ2SPg.crl (hash: jwpkEjo43wvwG4z2zL4seNZMFYwvKrPbmXVG3mVQ+RY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13441 (0x3481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E275B, serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Validity Not Before: May 30 15:22:23 2025 GMT Not After : Jun 6 15:22:23 2025 GMT Subject: CN=6839cd30-bfd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b5:3f:12:7b:b1:48:2f:16:5d:4a:11:04:ec: f5:0a:e5:88:ca:ec:f3:37:ae:8c:e3:44:ab:b8:75: 6b:63:e8:6e:9e:92:35:37:94:76:88:58:c5:ea:dd: 57:08:08:c9:7c:19:fb:6e:6f:c1:8b:4c:15:90:01: a1:b6:c7:cd:c0:49:4c:7a:62:fc:0e:05:b4:58:d1: 09:52:dd:91:3e:46:8d:4a:d1:c0:43:0f:9b:aa:6e: 1b:3d:86:e5:29:13:b6:0f:95:a6:da:09:db:29:bf: df:04:2d:e5:8d:db:24:50:6c:37:88:d5:cc:cd:2f: 5e:c5:85:f7:ea:d4:1c:74:15:86:b5:c3:94:9e:07: e0:6e:3b:e1:1d:6e:bb:d4:b2:89:f9:01:57:4e:73: 1e:3e:d2:3a:19:15:dc:a3:4e:f5:8d:a9:92:a4:a8: fc:71:e5:88:14:cd:27:5f:45:a7:40:0f:a6:5c:36: dc:2d:71:2d:99:f5:bb:c5:11:ec:03:8a:1a:66:52: b8:2f:20:2d:3f:1d:2f:6f:26:27:19:35:04:5c:b9: 2c:60:fd:12:fb:ca:25:c7:40:70:59:6d:91:20:f9: 5c:c5:1e:b5:fb:5c:6a:fb:42:4c:10:d7:a1:45:1a: cb:0e:6c:f1:ef:25:7c:e4:5a:35:86:4b:2d:8d:5f: 9c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:11:47:5A:FD:9A:65:68:C2:F4:1C:46:9B:BB:C7:0D:37:8C:FB:63 X509v3 Authority Key Identifier: keyid:7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:f2:ef:0b:b6:e1:a9:ab:cb:9f:bb:26:f6:02:38:02:bc:3f: 9a:75:6f:89:41:3b:ed:a8:d0:33:cf:c8:75:94:01:66:13:e4: b1:df:f0:fa:5e:a2:69:7f:f4:d3:e9:79:8e:58:ba:13:7f:b1: b4:06:97:6c:43:e0:29:6c:63:ac:25:96:a8:fc:6c:fd:9f:cc: 96:18:a5:ef:6a:53:61:0b:5f:40:2a:cc:74:d0:40:8c:b7:a1: 39:e2:e8:83:45:60:36:c7:41:b6:67:1b:fd:8a:ed:cf:5a:a2: 95:8a:af:49:9b:4d:6c:00:b7:b5:22:f5:97:af:3d:26:76:75: 7c:86:4d:69:2b:7d:a9:d9:b2:36:a7:28:39:70:35:43:d0:ce: f1:d5:30:70:d5:e3:d0:cd:f9:c2:d1:22:43:cf:9f:37:ee:fe: 60:ac:01:18:73:02:31:77:a2:d5:07:88:8b:db:f7:90:dd:e9: a8:10:9a:d5:bd:90:b3:f6:ac:62:ff:17:bc:69:d9:15:2f:10: 34:2d:16:13:ec:89:5c:c0:e0:dc:46:88:0a:58:43:22:ab:6b: 39:58:33:61:60:4e:51:16:a1:a1:e6:00:35:68:bf:9b:5f:89: 14:cc:a3:64:1c:da:7d:6d:6a:1a:ed:04:99:a5:25:f0:de:3c: 46:13:01:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3NUIxMTAvBgNVBAUTKDdGMTYxQUNGMTY0MDA3RThGN0Q4Qzc3MTE1QTVBMzlE MDQzNjQ4RjgwHhcNMjUwNTMwMTUyMjIzWhcNMjUwNjA2MTUyMjIzWjAYMRYwFAYD VQQDEw02ODM5Y2QzMC1iZmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLU/EnuxSC8WXUoRBOz1CuWIyuzzN66M40SruHVrY+hunpI1N5R2iFjF6t1X CAjJfBn7bm/Bi0wVkAGhtsfNwElMemL8DgW0WNEJUt2RPkaNStHAQw+bqm4bPYbl KRO2D5Wm2gnbKb/fBC3ljdskUGw3iNXMzS9exYX36tQcdBWGtcOUngfgbjvhHW67 1LKJ+QFXTnMePtI6GRXco071jamSpKj8ceWIFM0nX0WnQA+mXDbcLXEtmfW7xRHs A4oaZlK4LyAtPx0vbyYnGTUEXLksYP0S+8olx0BwWW2RIPlcxR61+1xq+0JMENeh RRrLDmzx7yV85Fo1hkstjV+cCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHARR1r9 mmVowvQcRpu7xw03jPtjMB8GA1UdIwQYMBaAFH8WGs8WQAfo99jHcRWlo50ENkj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUItajMyTWR4RmFXam5RUTJT UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z4WWF6eFpBQi1qMzJNZHhGYVdqblFRMlNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUIt ajMyTWR4RmFXam5RUTJTUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE8u8LtuGpq8ufuyb2AjgCvD+adW+JQTvtqNAzz8h1lAFmE+Sx3/D6 XqJpf/TT6XmOWLoTf7G0BpdsQ+ApbGOsJZao/Gz9n8yWGKXvalNhC19AKsx00ECM t6E54uiDRWA2x0G2Zxv9iu3PWqKViq9Jm01sALe1IvWXrz0mdnV8hk1pK32p2bI2 pyg5cDVD0M7x1TBw1ePQzfnC0SJDz5837v5grAEYcwIxd6LVB4iL2/eQ3emoEJrV vZCz9qxi/xe8adkVLxA0LRYT7IlcwODcRogKWEMiq2s5WDNhYE5RFqGh5gA1aL+b X4kUzKNkHNp9bWoa7QSZpSXw3jxGEwF3 -----END CERTIFICATE-----Generated at Sat May 31 16:27:43 2025 by rpki-client